Vulnerabilities > Codesys > High
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2021-05-03 | CVE-2021-29239 | Insufficient Verification of Data Authenticity vulnerability in Codesys Development System CODESYS Development System 3 before 3.5.17.0 displays or executes malicious documents or files embedded in libraries without first checking their validity. | 7.8 |
| 2021-05-03 | CVE-2021-29242 | Improper Input Validation vulnerability in Codesys products CODESYS Control Runtime system before 3.5.17.0 has improper input validation. | 7.3 |
| 2020-07-22 | CVE-2020-15806 | Memory Leak vulnerability in Codesys products CODESYS Control runtime system before 3.5.16.10 allows Uncontrolled Memory Allocation. | 7.5 |
| 2020-05-07 | CVE-2020-6081 | Insufficient Verification of Data Authenticity vulnerability in Codesys Runtime 3.5.14.30 An exploitable code execution vulnerability exists in the PLC_Task functionality of 3S-Smart Software Solutions GmbH CODESYS Runtime 3.5.14.30. | 8.8 |
| 2020-03-26 | CVE-2019-5105 | Out-of-bounds Write vulnerability in Codesys 3.5.13.2 An exploitable memory corruption vulnerability exists in the Name Service Client functionality of 3S-Smart Software Solutions CODESYS GatewayService. | 7.5 |
| 2019-09-17 | CVE-2019-13538 | Cross-site Scripting vulnerability in Codesys 3S-Smart Software Solutions GmbH CODESYS V3 Library Manager, all versions prior to 3.5.16.0, allows the system to display active library content without checking its validity, which may allow the contents of manipulated libraries to be displayed or executed. | 8.6 |
| 2019-09-17 | CVE-2019-9009 | Improper Handling of Exceptional Conditions vulnerability in Codesys products An issue was discovered in 3S-Smart CODESYS before 3.5.15.0 . | 7.5 |
| 2019-09-17 | CVE-2019-9008 | Incorrect Permission Assignment for Critical Resource vulnerability in Codesys products An issue was discovered in 3S-Smart CODESYS V3 through 3.5.12.30. | 8.8 |
| 2019-09-13 | CVE-2019-13532 | Path Traversal vulnerability in Codesys products CODESYS V3 web server, all versions prior to 3.5.14.10, allows an attacker to send specially crafted http or https requests which may allow access to files outside the restricted working directory of the controller. | 7.5 |
| 2019-08-15 | CVE-2019-9012 | Allocation of Resources Without Limits or Throttling vulnerability in Codesys products An issue was discovered in 3S-Smart CODESYS V3 products. | 7.5 |